Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/SyMnl-k5UucfnTeo_SQYwZ82xYs.roa
File: SyMnl-k5UucfnTeo_SQYwZ82xYs.roa (raw, json)
Hash identifier: IFFK24iMwjJA7VBKRvD/UabtondGciIM3nxVgegj8qk=
Subject key identifier: 4B:23:27:97:E9:39:52:E7:1F:9D:37:A8:FD:24:18:C1:9F:36:C5:8B
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0196A4499F097EA407F96B99E5B3F925BFE4
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/SyMnl-k5UucfnTeo_SQYwZ82xYs.roa
Signing time: Tue 06 May 2025 06:30:10 +0000
ROA not before: Tue 06 May 2025 06:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 176.106.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:49:9f:09:7e:a4:07:f9:6b:99:e5:b3:f9:25:bf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: May 6 06:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b232797e93952e71f9d37a8fd2418c19f36c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:df:d2:69:86:e2:56:0b:96:de:33:49:69:
28:a4:39:09:58:af:f3:fd:25:f1:7e:13:08:4e:73:
4d:c5:c3:1b:b7:7f:71:81:3a:39:c2:4a:bd:9b:61:
b0:89:0d:2f:30:ce:85:28:8f:91:29:89:a3:04:48:
69:ca:4b:9a:9f:74:b4:3c:a9:41:8b:b6:78:ac:80:
78:e8:4d:1b:57:31:b3:1d:7a:5b:1b:46:0b:d3:85:
e4:b2:97:a2:c4:6b:cc:c0:42:d3:05:52:ba:44:e7:
12:75:c0:dd:f0:c6:d8:5b:c8:e0:fd:eb:f9:2f:49:
fc:ee:ec:79:d2:ff:fe:29:a8:47:37:d0:ba:19:e1:
8d:04:a3:da:56:9b:2e:7b:e4:ad:ed:bb:0c:48:10:
2a:54:de:60:1a:e1:4e:16:b4:36:1f:32:8a:3b:ea:
c0:df:bb:45:d6:e5:83:17:90:ee:32:db:51:4f:b2:
41:93:93:ed:a9:a8:eb:8e:9a:00:98:91:22:8a:c4:
74:80:ba:99:d6:71:26:d8:30:e9:74:a5:6e:e3:84:
da:e0:1a:05:79:97:28:45:3c:8a:76:90:aa:9d:73:
c0:76:79:09:e3:95:24:e5:7c:20:f6:39:8e:bb:70:
8b:59:4a:20:38:9d:6d:81:f5:aa:fd:5c:1a:47:c7:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:23:27:97:E9:39:52:E7:1F:9D:37:A8:FD:24:18:C1:9F:36:C5:8B
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/SyMnl-k5UucfnTeo_SQYwZ82xYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.102.0/23
Signature Algorithm: sha256WithRSAEncryption
60:e0:a2:48:51:e4:9a:5c:d2:01:7e:db:06:43:d8:92:ec:50:
7c:30:dc:fb:6d:98:51:23:3a:bf:2e:47:c8:9f:78:7d:5f:a1:
71:eb:f5:39:20:37:45:b9:94:9b:10:2f:f7:81:61:56:d1:3a:
e9:fa:b6:48:60:80:ce:d3:4f:64:a3:92:08:35:36:f0:a1:6a:
cc:72:f1:31:d2:9e:c9:46:0e:ed:cb:6f:32:d4:34:e8:54:11:
23:c3:2e:14:a1:78:b6:ea:02:62:a5:1a:8e:a8:18:0a:f1:81:
05:49:e4:9a:0a:ae:e1:2d:e0:00:3d:39:5f:bc:f0:2e:a3:85:
c4:88:57:9b:b7:5c:ff:f6:9b:50:84:71:7e:2d:77:ed:98:ca:
63:c1:d3:8d:91:b7:81:29:8c:a8:0d:18:6c:dc:c8:4e:7e:ac:
92:99:03:54:f6:f1:f0:08:8e:80:8e:77:02:b1:e3:c0:93:21:
a9:f5:b8:79:a2:f9:ec:8c:c5:fc:cb:31:c1:0d:65:dd:61:48:
9e:f1:ac:ab:88:73:6f:b2:87:e5:88:89:f8:8e:25:28:cc:7b:
e4:31:82:a6:d2:59:f3:6a:bc:83:60:96:2a:25:a5:aa:25:50:
a0:4f:32:37:ae:da:3d:a2:d2:db:cb:e8:48:b3:43:3a:38:ae:
94:05:dc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:12:54 2025 by rpki-client